When using cloudflare defender does not recognize the true IP address

I use Cloudflare for my site. I use the Cloudflare plugin to get the real IP addresses and not the proxied ones to all the plugins. However, when logging actions Defender logs the IP addresses of the cloudflare proxies, not the real IP addresses of the locations.

Makes the IP address not very useful.

  • Dimitris
    • Support Star

    Hey there Wilko,

    hope you’re doing good today! :slight_smile:

    I was able to spot the exact same issue in a test installation where I use Cloudflare integration via HummingBird, and Defender’s Audit Logging was showing the Cloudflare IP in my user login action, instead of my real current IP address.

    I’ve already created a bug report for Defender’s devs, which is internally connected with this thread.

    As soon as there’s any development on this issue, me or another colleague of mine will keep you updated here.

    Warm regards,


  • Samuel
    • WPMU DEV Initiate

    I recently had this issue. I received a bunch of IP lockout notifications for a site on cloudflare and noticed the same issue. It turns out that when you install and run the cloudflare app on the wordpress site, the true IP addresses will be sent over. What great joy.

Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.